Not named in the source

What happened

The DPA fined a controller for, among other things, failing to erase a data subject’s personal data in the context of direct marketing and for having an overloaded part-time DPO, which could not effectively perform their tasks. The DPA initially issued a €245,000 fine, which was reduced to €172,431 due to the controller’s difficult financial situation.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a)Read →
• Art. 17Right to erasure (‘right to be forgotten’)Read →
• Art. 21Right to object21(2)Read →
• Art. 38Position of the data protection officer38(2)Read →

• Data principles
• Data protection officer
• Data subject rights